Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

2.3.39.217 6.02%
2.2.25.211 17.29%
2.1.18.208 11.28%
2.0.12.205 61.65%
2.0.10.205 2.26%
2.0.6.196 0.75%
2.0.3.160 0.75%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
SetSecurityDescriptorDacl, ReportEventW, RegisterEventSourceW, RegUnLoadKeyW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegLoadKeyW, RegCloseKey, OpenProcessToken, LookupPrivilegeValueA, InitializeSecurityDescriptor, GetUserNameA, AdjustTokenPrivileges, OpenServiceW, OpenSCManagerW, CloseServiceHandle, GetUserNameW, ChangeServiceConfig2W, ReportEventA, RegisterEventSourceA, DeregisterEventSource, RegSetValueExA, RegOpenKeyExA, RegEnumKeyW, RegDeleteKeyW, RegCreateKeyExW, GetTokenInformation, GetLengthSid, FreeSid, DuplicateTokenEx, CreateProcessAsUserW, AllocateAndInitializeSid, GetKernelObjectSecurity
comctl32.dll
ImageList_GetIconSize, ImageList_Write, ImageList_Read, ImageList_GetIcon, ImageList_ReplaceIcon, ImageList_GetImageCount, ImageList_Destroy, ImageList_Create
dec150.bpl
@Crc@initialization$qqrv, @Crc@Finalization$qqrv, @Decutil@initialization$qqrv, @Decutil@Finalization$qqrv
iphlpapi.dll
GetUdpTable, GetTcpTable
jcl150.bpl
@Jclresources@initialization$qqrv, @Jclresources@Finalization$qqrv, @Jclbase@initialization$qqrv, @Jclbase@Finalization$qqrv, @Jclwin32@initialization$qqrv, @Jclwin32@Finalization$qqrv, @Jcllogic@initialization$qqrv, @Jcllogic@Finalization$qqrv, @Snmp@initialization$qqrv, @Snmp@Finalization$qqrv, @Jclsecurity@initialization$qqrv, @Jclsecurity@Finalization$qqrv, @Jcldatetime@initialization$qqrv, @Jcldatetime@Finalization$qqrv, @Jclfileutils@initialization$qqrv, @Jclfileutils@Finalization$qqrv, @Jclshell@initialization$qqrv, @Jclshell@Finalization$qqrv, @Jcl8087@initialization$qqrv, @Jcl8087@Finalization$qqrv, @Jclinifiles@initialization$qqrv, @Jclinifiles@Finalization$qqrv, @Jclsysinfo@initialization$qqrv, @Jclsysinfo@Finalization$qqrv, @Jclstringconversions@initialization$qqrv, @Jclstringconversions@Finalization$qqrv, @Jclcharsets@initialization$qqrv, @Jclcharsets@Finalization$qqrv, @Jclmath@initialization$qqrv, @Jclmath@Finalization$qqrv, @Jclstreams@initialization$qqrv, @Jclstreams@Finalization$qqrv, @Jclansistrings@initialization$qqrv, @Jclansistrings@Finalization$qqrv, @Jclansistrings@TJclAnsiStringList@SetSorted$qqro, @Jclansistrings@TJclAnsiStringList@$bctr$qqrv, @Jclansistrings@TJclAnsiStrings@GetValueFromIndex$qqri, @Jclansistrings@TJclAnsiStrings@SetValue$qqrx27System@%AnsiStringT$us$i0$%t1, @Jclansistrings@TJclAnsiStrings@GetValue$qqrx27System@%AnsiStringT$us$i0$%, @Jclansistrings@TJclAnsiStrings@GetName$qqri, @Jclansistrings@TJclAnsiStringList@, @Jclwidestrings@initialization$qqrv, @Jclwidestrings@Finalization$qqrv, @Jclregistry@initialization$qqrv, @Jclregistry@Finalization$qqrv, @Jclsynch@initialization$qqrv, @Jclsynch@Finalization$qqrv, @Jclconsole@initialization$qqrv, @Jclconsole@Finalization$qqrv, @Jclsysutils@initialization$qqrv, @Jclsysutils@Finalization$qqrv, @Jclunitversioning@initialization$qqrv, @Jclunitversioning@Finalization$qqrv, @Jclstrings@initialization$qqrv, @Jclstrings@Finalization$qqrv, @Jclunicode@initialization$qqrv, @Jclunicode@Finalization$qqrv, @Jclsimplexml@initialization$qqrv, @Jclsimplexml@Finalization$qqrv, @Jclsimplexml@TJclSimpleXMLProps@GetItemNamed$qqrx20System@UnicodeString, @Jclsimplexml@TJclSimpleXMLElems@GetItemNamed$qqrx20System@UnicodeString, @Jclsimplexml@TJclSimpleXMLElems@GetItem$qqrxi, @Jclsimplexml@TJclSimpleXMLElems@GetCount$qqrv, @Jclsimplexml@TJclSimpleXMLElem@GetProps$qqrv, @Jclsimplexml@TJclSimpleXMLElem@GetItems$qqrv, @Jclsimplexml@TJclSimpleXML@LoadFromFile$qqrx20System@UnicodeString29Jclstreams@TJclStringEncodingus, @Jclsimplexml@TJclSimpleXML@$bctr$qqrv, @Jclsimplexml@TJclSimpleData@GetIntValue$qqrv, @Jclsimplexml@TJclSimpleXML@, @Jclansistrings@TJclAnsiStrings@SetText$qqrx27System@%AnsiStringT$us$i0$%, @Jclansistrings@TJclAnsiStrings@SetCommaText$qqrx27System@%AnsiStringT$us$i0$%, @Jclansistrings@TJclAnsiStrings@GetCommaText$qqrv, @$xp$33Jclansistrings@TJclAnsiStringList, @$xp$30Jclansistrings@TJclAnsiStrings
kernel32.dll
GetModuleHandleW, UnmapViewOfFile, Sleep, SetErrorMode, SetEndOfFile, RaiseException, QueryPerformanceFrequency, QueryPerformanceCounter, OutputDebugStringW, OpenFileMappingW, MoveFileW, MapViewOfFile, LoadLibraryW, GetWindowsDirectoryA, GetWindowsDirectoryW, GetVersionExW, GetVersion, GetTimeZoneInformation, GetTickCount, GetTempPathW, GetSystemDirectoryA, GetSystemDirectoryW, GetProcessHeap, GetProcAddress, GetModuleFileNameW, GetLogicalDrives, GetLastError, GetFileSize, GetFileAttributesA, GetFileAttributesW, GetDriveTypeW, GetCurrentThreadId, GetCurrentProcess, FreeLibrary, FormatMessageA, FlushViewOfFile, FindNextFileW, FindFirstFileW, FindClose, FileTimeToLocalFileTime, FileTimeToDosDateTime, DeleteFileW, CreateFileMappingA, CreateFileMappingW, CreateFileA, CreateFileW, CopyFileW, CompareStringW, CloseHandle, GetComputerNameW, TlsSetValue, TlsGetValue, LocalAlloc, lstrlenA, lstrlenW, lstrcpyA, lstrcpyW, lstrcmpiA, lstrcmpA, lstrcatW, WriteProcessMemory, WaitForSingleObject, WaitForMultipleObjectsEx, WaitForMultipleObjects, VirtualQueryEx, VirtualQuery, VirtualProtectEx, VirtualProtect, VirtualFree, VirtualAlloc, TerminateThread, TerminateProcess, SuspendThread, SetThreadPriority, SetThreadContext, SetThreadAffinityMask, SetPriorityClass, SetLastError, SetEvent, ResumeThread, ResetEvent, ReleaseMutex, ReadProcessMemory, ReadFile, PulseEvent, OpenProcess, OpenMutexA, OpenFileMappingA, OpenEventA, LocalFree, LoadLibraryExA, LoadLibraryA, LeaveCriticalSection, InitializeCriticalSection, GlobalUnlock, GlobalSize, GlobalLock, GlobalFree, GlobalAlloc, GetVersionExA, GetThreadPriority, GetThreadContext, GetStartupInfoW, GetProcessVersion, GetProcessAffinityMask, GetPriorityClass, GetModuleHandleA, GetModuleFileNameA, GetExitCodeThread, GetExitCodeProcess, GetEnvironmentStringsW, GetCurrentThread, GetCurrentProcessId, GetCurrentDirectoryA, GetCurrentDirectoryW, GetCommandLineA, InterlockedIncrement, InterlockedExchange, InterlockedDecrement, FormatMessageW, FindFirstFileA, ExitThread, ExitProcess, EnterCriticalSection, DuplicateHandle, DeviceIoControl, DeleteCriticalSection, CreateThread, CreateSemaphoreW, CreateProcessW, CreatePipe, CreateMutexA, CreateMutexW, CreateEventA, CreateEventW, WTSGetActiveConsoleSessionId
netapi32.dll
NetUserGetInfo, NetApiBufferFree
ole32.dll
CoTaskMemFree, CreateStreamOnHGlobal, GetHGlobalFromStream
oleaut32.dll
RegisterTypeLib, LoadTypeLibEx
rtl150.bpl
DllMain, @Rtlconsts@_SFOpenError, @Rtlconsts@_SFCreateError, @Excutils@initialization$qqrv, @Excutils@Finalization$qqrv, @Sysutils@initialization$qqrv, @Sysutils@Finalization$qqrv, @Sysutils@TEncoding@GetUTF8$qqrv, @Sysutils@TEncoding@GetUTF7$qqrv, @Sysutils@TEncoding@GetString$qqrx25System@%DynamicArray$tuc%ii, @Sysutils@TEncoding@GetEncodingName$qqrv, @Sysutils@TEncoding@GetDefault$qqrv, @Sysutils@TEncoding@GetCodePage$qqrv, @Sysutils@TEncoding@GetChars$qqrx25System@%DynamicArray$tuc%iix24System@%DynamicArray$tb%i, @Sysutils@TEncoding@GetBytes$qqrx20System@UnicodeString, @Sysutils@TEncoding@GetBytes$qqrx24System@%DynamicArray$tb%, @Sysutils@TEncoding@GetASCII$qqrv, @Sysutils@TEncoding@$bcdtr$qqrv, @Sysutils@TEncoding@Clone$qqrv, @Sysutils@SafeLoadLibrary$qqrx20System@UnicodeStringui, @Sysutils@TLanguages@$bcdtr$qqrv, @Sysutils@FreeAndNil$qqrpv, @Sysutils@TMultiReadExclusiveWriteSynchronizer@EndRead$qqrv, @Sysutils@TMultiReadExclusiveWriteSynchronizer@BeginRead$qqrv, @Sysutils@TMultiReadExclusiveWriteSynchronizer@EndWrite$qqrv, @Sysutils@TMultiReadExclusiveWriteSynchronizer@BeginWrite$qqrv, @Sysutils@TMultiReadExclusiveWriteSynchronizer@$bdtr$qqrv, @Sysutils@TMultiReadExclusiveWriteSynchronizer@$bctr$qqrv, @Sysutils@RaiseLastOSError$qqrv, @Sysutils@GetModuleName$qqrui, @Sysutils@FindCmdLineSwitch$qqrx20System@UnicodeString, @Sysutils@StringReplace$qqrx20System@UnicodeStringt1t149System@%Set$t21Sysutils@Sysutils__85$iuc$0$iuc$1%, @Sysutils@AnsiStrScan$qqrpcc, @Sysutils@AnsiPos$qqrx20System@UnicodeStringt1, @Sysutils@ExcludeTrailingPathDelimiter$qqrx20System@UnicodeString, @Sysutils@IncludeTrailingPathDelimiter$qqrx20System@UnicodeString, @Sysutils@IncludeTrailingBackslash$qqrx20System@UnicodeString, @Sysutils@Exception@$bcdtr$qqrv, @Sysutils@Exception@$bcctr$qqrv, @Sysutils@Exception@ToString$qqrv, @Sysutils@Exception@RaisingException$qqrp23System@TExceptionRecord, @Sysutils@Exception@GetBaseException$qqrv, @Sysutils@Exception@$bdtr$qqrv, @Sysutils@Exception@$bctr$qqrp20System@TResStringRecpx14System@TVarRecxi, @Sysutils@Exception@$bctr$qqrx20System@UnicodeStringpx14System@TVarRecxi, @Sysutils@Exception@$bctr$qqrx20System@UnicodeString, @Sysutils@SysErrorMessage$qqrui, @Sysutils@FormatDateTime$qqrx20System@UnicodeString16System@TDateTime, @Sysutils@Now$qqrv, @Sysutils@DayOfWeek$qqrx16System@TDateTime, @Sysutils@DecodeDate$qqrx16System@TDateTimerust2t2, @Sysutils@StrToFloat$qqrx20System@UnicodeString, @Sysutils@FloatToStr$qqrg, @Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxirx24Sysutils@TFormatSettings, @Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi, @Sysutils@StrLIComp$qqrpxct1ui, @Sysutils@StrPCopy$qqrpbx20System@UnicodeString, @Sysutils@StrEnd$qqrpxc, @Sysutils@StrLen$qqrpxb, @Sysutils@StrLen$qqrpxc, @Sysutils@FileDateToDateTime$qqri, @Sysutils@ExtractFileExt$qqrx20System@UnicodeString, @Sysutils@ExtractFileName$qqrx20System@UnicodeString, @Sysutils@ExtractFilePath$qqrx20System@UnicodeString, @Sysutils@LastDelimiter$qqrx20System@UnicodeStringt1, @Sysutils@AnsiLastChar$qqrx20System@UnicodeString, @Sysutils@AnsiLastChar$qqrx27System@%AnsiStringT$us$i0$%, @Sysutils@RenameFile$qqrx20System@UnicodeStringt1, @Sysutils@DeleteFile$qqrx20System@UnicodeString, @Sysutils@FindClose$qqrr19Sysutils@TSearchRec, @Sysutils@FindNext$qqrr19Sysutils@TSearchRec, @Sysutils@FindFirst$qqrx20System@UnicodeStringir19Sysutils@TSearchRec, @Sysutils@FileSetAttr$qqrx20System@UnicodeStringio, @Sysutils@FileGetAttr$qqrx20System@UnicodeStringo, @Sysutils@ForceDirectories$qqr20System@UnicodeString, @Sysutils@DirectoryExists$qqrx20System@UnicodeStringo, @Sysutils@FileExists$qqrx20System@UnicodeStringo, @Sysutils@FileAge$qqrx20System@UnicodeStringr16System@TDateTimeo, @Sysutils@FileClose$qqri, @Sysutils@FileSeek$qqrixji, @Sysutils@StrToInt64Def$qqrx20System@UnicodeStringxj, @Sysutils@StrToIntDef$qqrx20System@UnicodeStringi, @Sysutils@StrToInt$qqrx20System@UnicodeString, @Sysutils@IntToHex$qqrii, @Sysutils@IntToStr$qqrj, @Sysutils@IntToStr$qqri, @Sysutils@TrimRight$qqrx20System@UnicodeString, @Sysutils@TrimLeft$qqrx20System@UnicodeString, @Sysutils@Trim$qqrx20System@UnicodeString, @Sysutils@AnsiStrLIComp$qqrpct1ui, @Sysutils@AnsiStrIComp$qqrpbt1, @Sysutils@AnsiSameText$qqrx20System@UnicodeStringt1, @Sysutils@AnsiCompareText$qqrx20System@UnicodeStringt1, @Sysutils@AnsiCompareStr$qqrx20System@UnicodeStringt1, @Sysutils@AnsiLowerCase$qqrx20System@UnicodeString, @Sysutils@AnsiUpperCase$qqrx20System@UnicodeString, @Sysutils@CompareText$qqrx20System@UnicodeStringt1, @Sysutils@CompareMem$qqrpvt1i, @Sysutils@LowerCase$qqrx20System@UnicodeString, @Sysutils@UpperCase$qqrx20System@UnicodeString, @$xp$18Sysutils@TEncoding, @Sysutils@TEncoding@, @Sysutils@TEncoding@$bcctr$qqrv, @$xp$45Sysutils@TMultiReadExclusiveWriteSynchronizer, @Sysutils@TMultiReadExclusiveWriteSynchronizer@, @Sysutils@HexDisplayPrefix, @Sysutils@LeadBytes, @$xp$24Sysutils@TFormatSettings, @Sysutils@DecimalSeparator, @Sysutils@ShortMonthNames, @Sysutils@Win32MinorVersion, @Sysutils@Win32MajorVersion, @Sysutils@Win32Platform, @Sysutils@EConvertError@, @$xp$18Sysutils@Exception, @Sysutils@Exception@, @Sysutils@TLanguages@$bcctr$qqrv, @$xp$23Sysutils@%TArray__1$uc%, @$xp$19Sysutils@TSearchRec, @Varutils@initialization$qqrv, @Varutils@Finalization$qqrv, @Variants@initialization$qqrv, @Variants@Finalization$qqrv, @Typinfo@initialization$qqrv, @Typinfo@Finalization$qqrv, @Strutils@RightStr$qqrx17System@WideStringxi, @Strutils@RightStr$qqrx27System@%AnsiStringT$us$i0$%xi, @Strutils@ReverseString$qqrx20System@UnicodeString, @Math@IfThen$qqroxixi, @Timespan@TTimeSpan@$bcctr$qqrv, @Timespan@TTimeSpan@$bcdtr$qqrv, @Syncobjs@initialization$qqrv, @Syncobjs@Finalization$qqrv, @Syncobjs@TInterlocked@Exchange$qqrrii, @Syncobjs@TInterlocked@CompareExchange$qqrrpvpvt2, @Syncobjs@TCriticalSection@Leave$qqrv, @Syncobjs@TCriticalSection@Enter$qqrv, @Syncobjs@TCriticalSection@Release$qqrv, @Syncobjs@TCriticalSection@Acquire$qqrv, @Syncobjs@TCriticalSection@$bdtr$qqrv, @Syncobjs@TCriticalSection@$bctr$qqrv, @Syncobjs@TEvent@ResetEvent$qqrv, @Syncobjs@TEvent@SetEvent$qqrv, @Syncobjs@TEvent@$bctr$qqrp20_SECURITY_ATTRIBUTESoox20System@UnicodeStringo, @Syncobjs@TSynchroObject@WaitFor$qqrui, @$xp$25Syncobjs@TCriticalSection, @Syncobjs@TCriticalSection@, @Syncobjs@TEvent@, @Ansistrings@ExcludeTrailingPathDelimiter$qqrx27System@%AnsiStringT$us$i0$%, @Ansistrings@IncludeTrailingPathDelimiter$qqrx27System@%AnsiStringT$us$i0$%, @Ansistrings@ExtractFilePath$qqrx27System@%AnsiStringT$us$i0$%, @Ansistrings@AnsiPos$qqrx27System@%AnsiStringT$us$i0$%t1, @Ansistrings@Trim$qqrx27System@%AnsiStringT$us$i0$%, @Ansistrings@AnsiCompareText$qqrx27System@%AnsiStringT$us$i0$%t1, @Ansistrings@AnsiUpperCase$qqrx27System@%AnsiStringT$us$i0$%, @Ansistrings@LowerCase$qqrx27System@%AnsiStringT$us$i0$%, @Ansistrings@UpperCase$qqrx27System@%AnsiStringT$us$i0$%, @Ansistrings@StringReplace$qqrx27System@%AnsiStringT$us$i0$%t1t149System@%Set$t21Sysutils@Sysutils__85$iuc$0$iuc$1%, @Dateutils@TTimeZone@$bcdtr$qqrv, @Dateutils@TTimeZone@$bcctr$qqrv, @Ioutils@initialization$qqrv, @Ioutils@Finalization$qqrv, @Ioutils@TPath@$bcctr$qqrv, @Ioutils@TPath@$bcdtr$qqrv, @Inifiles@initialization$qqrv, @Inifiles@Finalization$qqrv, @Inifiles@TMemIniFile@$bctr$qqrx20System@UnicodeString, @Inifiles@THashedStringList@IndexOfName$qqrx20System@UnicodeString, @Inifiles@THashedStringList@IndexOf$qqrx20System@UnicodeString, @Inifiles@THashedStringList@$bdtr$qqrv, @Inifiles@THashedStringList@Changed$qqrv, @Inifiles@TCustomIniFile@$bctr$qqrx20System@UnicodeString, @Inifiles@TIniFile@, @Inifiles@TMemIniFile@, @$xp$26Inifiles@THashedStringList, @Inifiles@THashedStringList@, @$xp$23Inifiles@TCustomIniFile, @Registry@initialization$qqrv, @Registry@Finalization$qqrv, @Registry@TRegistry@ValueExists$qqrx20System@UnicodeString, @Registry@TRegistry@ReadDateTime$qqrx20System@UnicodeString, @Registry@TRegistry@ReadBool$qqrx20System@UnicodeString, @Registry@TRegistry@ReadInteger$qqrx20System@UnicodeString, @Registry@TRegistry@WriteInteger$qqrx20System@UnicodeStringi, @Registry@TRegistry@ReadString$qqrx20System@UnicodeString, @Registry@TRegistry@WriteExpandString$qqrx20System@UnicodeStringt1, @Registry@TRegistry@GetDataType$qqrx20System@UnicodeString, @Registry@TRegistry@GetKeyNames$qqrp16Classes@TStrings, @Registry@TRegistry@OpenKeyReadOnly$qqrx20System@UnicodeString, @Registry@TRegistry@OpenKey$qqrx20System@UnicodeStringo, @Registry@TRegistry@SetRootKey$qqrp6HKEY__, @Registry@TRegistry@CloseKey$qqrv, @Registry@TRegistry@$bctr$qqrui, @Registry@TRegistry@$bctr$qqrv, @Registry@TRegistry@, @Contnrs@TObjectList@SetItem$qqrip14System@TObject, @Contnrs@TObjectList@Remove$qqrp14System@TObject, @Contnrs@TObjectList@Notify$qqrpv25Classes@TListNotification, @Contnrs@TObjectList@Insert$qqrip14System@TObject, @Contnrs@TObjectList@IndexOf$qqrp14System@TObject, @Contnrs@TObjectList@GetItem$qqri, @Contnrs@TObjectList@Extract$qqrp14System@TObject, @Contnrs@TObjectList@$bctr$qqro, @Contnrs@TObjectList@$bctr$qqrv, @Contnrs@TObjectList@Add$qqrp14System@TObject, @$xp$19Contnrs@TObjectList, @Contnrs@TObjectList@, @Uxtheme@initialization$qqrv, @Uxtheme@Finalization$qqrv, @Helpintfs@initialization$qqrv, @Helpintfs@Finalization$qqrv, @Flatsb@initialization$qqrv, @Flatsb@Finalization$qqrv, @Comobj@initialization$qqrv, @Comobj@Finalization$qqrv, @Comobj@TComServerObject@$bcctr$qqrv, @Comobj@TComServerObject@$bcdtr$qqrv, @Inifiles@TMemIniFile@WriteString$qqrx20System@UnicodeStringt1t1, @Inifiles@TMemIniFile@UpdateFile$qqrv, @Inifiles@TMemIniFile@SetStrings$qqrp16Classes@TStrings, @Inifiles@TMemIniFile@ReadString$qqrx20System@UnicodeStringt1t1, @Inifiles@TMemIniFile@ReadSectionValues$qqrx20System@UnicodeStringp16Classes@TStrings, @Inifiles@TMemIniFile@ReadSections$qqrp16Classes@TStrings, @Inifiles@TMemIniFile@ReadSection$qqrx20System@UnicodeStringp16Classes@TStrings, @Inifiles@TMemIniFile@GetStrings$qqrp16Classes@TStrings, @Inifiles@TMemIniFile@EraseSection$qqrx20System@UnicodeString, @Inifiles@TMemIniFile@DeleteKey$qqrx20System@UnicodeStringt1, @Inifiles@TMemIniFile@Clear$qqrv, @Inifiles@TMemIniFile@$bdtr$qqrv, @Inifiles@TCustomIniFile@ReadSubSections$qqrx20System@UnicodeStringp16Classes@TStringso, @Inifiles@TCustomIniFile@ReadSections$qqrx20System@UnicodeStringp16Classes@TStrings, @Inifiles@TCustomIniFile@InternalReadSections$qqrx20System@UnicodeStringp16Classes@TStringsoo, @Inifiles@TCustomIniFile@WriteBinaryStream$qqrx20System@UnicodeStringt1p15Classes@TStream, @Inifiles@TCustomIniFile@ReadBinaryStream$qqrx20System@UnicodeStringt1p15Classes@TStream, @Inifiles@TCustomIniFile@ValueExists$qqrx20System@UnicodeStringt1, @Inifiles@TCustomIniFile@WriteBool$qqrx20System@UnicodeStringt1o, @Inifiles@TCustomIniFile@WriteTime$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@WriteFloat$qqrx20System@UnicodeStringt1d, @Inifiles@TCustomIniFile@WriteDateTime$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@WriteDate$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadTime$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadFloat$qqrx20System@UnicodeStringt1d, @Inifiles@TCustomIniFile@ReadDateTime$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadDate$qqrx20System@UnicodeStringt116System@TDateTime, @Inifiles@TCustomIniFile@ReadBool$qqrx20System@UnicodeStringt1o, @Inifiles@TCustomIniFile@WriteInteger$qqrx20System@UnicodeStringt1i, @Inifiles@TCustomIniFile@ReadInteger$qqrx20System@UnicodeStringt1i, @$xp$20Inifiles@TMemIniFile, @Zlib@TZDecompressionStream@$bctr$qqrp15Classes@TStream, @Zlib@TZCompressionStream@$bctr$qqr22Zlib@TCompressionLevelp15Classes@TStream, @Zlib@TZDecompressionStream@, @Zlib@TZCompressionStream@, @Regularexpressions@initialization$qqrv, @Regularexpressions@Finalization$qqrv, @$xp$11Types@TRect, @$xp$11Types@PRect, @$xp$12Types@TPoint, @Sysutils@AddTerminateProc$qqrpqqrv$o, @Sysutils@FindCmdLineSwitch$qqrx20System@UnicodeStringrx29System@%Set$tc$iuc$0$iuc$255%o, @Sysutils@TextPos$qqrpbt1, @Sysutils@ShowException$qqrp14System@TObjectpv, @Sysutils@FloatToStrF$qqrg21Sysutils@TFloatFormatii, @Sysutils@WideFormat$qqrx17System@WideStringpx14System@TVarRecxi, @Sysutils@StrPLCopy$qqrpcx27System@%AnsiStringT$us$i0$%ui, @Sysutils@StrPCopy$qqrpcx27System@%AnsiStringT$us$i0$%, @Sysutils@ExtractFileDrive$qqrx20System@UnicodeString, @Sysutils@ExtractFileDir$qqrx20System@UnicodeString, @Sysutils@ChangeFileExt$qqrx20System@UnicodeStringt1, @Sysutils@IntToHex$qqrji, @Sysutils@GUIDToString$qqrrx5_GUID, @$xp$19Sysutils@TProcedure, @$xp$8ITypeLib, @Strutils@AnsiEndsText$qqrx20System@UnicodeStringt1, @Ansistrings@Format$qqrx27System@%AnsiStringT$us$i0$%px14System@TVarRecxi, @Registry@TRegistry@KeyExists$qqrx20System@UnicodeString, @Comconst@_SNoCloseActiveServer2, @Comconst@_SNoCloseActiveServer1, @Comconst@_SAutomationWarning, @Comobj@ComClassManager$qqrv, @Comobj@OleCheck$qqrl, @Comobj@TComObjectFactory@RegisterClassObject$qqrv, @Comobj@TComClassManager@ForEachFactory$qqrp23Comobj@TComServerObjectynpqqrp24Comobj@TComObjectFactory$v, @Comobj@CoInitFlags, @Comobj@CoResumeClassObjects, @Comobj@CoReleaseServerProcess, @Comobj@CoAddRefServerProcess, @Comobj@CoInitializeEx, @Comobj@EOleRegistrationError@, @$xp$23Comobj@TComServerObject, @Comobj@TComServerObject@, @Comobj@TComServerObject@FPerUserRegistration
shell32.dll
SHGetSpecialFolderLocation, SHGetPathFromIDListA, SHGetPathFromIDListW, SHGetFileInfoA, Shell_NotifyIconW, SHGetFolderPathA, SHGetFolderPathW, ILFree, SHGetFolderLocation
snlbase150.bpl
@Snlnumbers@HexToByte$qqrx17System@WideString, @Snlnumbers@LongWordToHexA$qqrxui, @Snlnumbers@ByteToHexA$qqrxuc, @Snlnumbers@ByteToHex$qqrxuc, @Snlstrings@initialization$qqrv, @Snlstrings@Finalization$qqrv, @Snlstrings@snlPos$qqr27System@%AnsiStringT$us$i0$%t1, @Snlstrings@snlFileExists$qqrx17System@WideStringo, @Snlstrings@SplitURI$qqrx27System@%AnsiStringT$us$i0$%r27System@%AnsiStringT$us$i0$%p16Classes@TStringsc, @Snlstrings@WideStringReplace$qqrx17System@WideStringt1t149System@%Set$t21Sysutils@Sysutils__85$iuc$0$iuc$1%, @Snlstrings@StringToRegExpr$qqrx17System@WideString, @Snlstrings@ProfileFolderNameToDomainUsername$qqr20System@UnicodeString, @Snlstrings@SolveDomainHexCharsUTF8$qqrx27System@%AnsiStringT$us$i0$%, @Snlstrings@SolveDomainHexChars$qqrx17System@WideString, @Snlstrings@SolveDomainHexChars$qqrx27System@%AnsiStringT$us$i0$%, @Snlstrings@URIDecode$qqrx27System@%AnsiStringT$us$i0$%, @Snlstrings@StringSeemsValidDomain$qqrx17System@WideString, @Snlstrings@StringIsNumbersAndDots$qqrx17System@WideString, @Snlregconsts@initialization$qqrv, @Snlregconsts@Finalization$qqrv, @Snlregstrings@initialization$qqrv, @Snlregstrings@Finalization$qqrv, @Snlregstrings@pkRegSplitFull$qqrx27System@%AnsiStringT$us$i0$%rp6HKEY__r27System@%AnsiStringT$us$i0$%t3, @Snlregstrings@ValueStringToRootKeyValue$qqr27System@%AnsiStringT$us$i0$%rp6HKEY__r27System@%AnsiStringT$us$i0$%t3, @Snlregtypes@initialization$qqrv, @Snlregtypes@Finalization$qqrv, @Snlcredits@initialization$qqrv, @Snlcredits@Finalization$qqrv, @Snlcredits@RegisterLicense$qqr20System@UnicodeStringt1t123Snlcredits@TLicenseType22Snlcredits@TVisibility, @Snlcredits@RegisterAppleiPhoneTrademark$qqrv, @Snljson@initialization$qqrv, @Snljson@Finalization$qqrv, @Snlwindows@initialization$qqrv, @Snlwindows@Finalization$qqrv, @Snlwindows@MyWindowsIsXPOrLater$qqrv, @Snlwinapint@initialization$qqrv, @Snlwinapint@Finalization$qqrv, @Snllocalizer@initialization$qqrv, @Snllocalizer@Finalization$qqrv, @Snllocalizer@TSpecialTranslators@$bcdtr$qqrv, @Snllocalizer@TSpecialTranslators@$bcctr$qqrv, @Snllocalizer@_$qqrx20System@UnicodeString, @Snldate@initialization$qqrv, @Snldate@Finalization$qqrv, @Snldate@SNLDateTimeOrNA$qqrx16System@TDateTime, @Snldate@EightLetterDateTimeToDateTime$qqr20System@UnicodeString, @Snldate@KernelDateTimeToDateTime$qqrxj, @Snldate@ConvertDateTimeToUNIXTime$qqr16System@TDateTime, @Snldate@ConvertUNIXTimeToDateTime$qqrd, @Snldate@FileTimeToDateTime$qqrrx9_FILETIME, @Snlstreams@TMyFileStreamHelper@ReadZeroTerminatedWideString$qqrv, @Snlstreams@TMyFileStreamHelper@ReadZeroTerminatedAnsiString$qqrv, @Snlstreams@TMyFileStreamHelper@ReadAnsiToStringList$qqrpx16Classes@TStrings, @Snldebugconsts@initialization$qqrv, @Snldebugconsts@Finalization$qqrv, @Snldebugconsts@THandlerData@$bcdtr$qqrv, @Snldebugconsts@THandlerData@$bcctr$qqrv, @Snldebugconsts@RegisterDebugLogDataHandler$qqrpqqr30Snldebugconsts@TDebugDirection25Snldebugconsts@TDebugTypep14System@TObject17System@WideStringpx14System@TVarRecxi$v, @Snldebugconsts@RegisterDebugLogLineHandler$qqrpqqrx17System@WideString$v, @Snldebugconsts@DebugOutputs, @Snlcollection@XMLify$qqr20System@UnicodeString, @Snlcollection@GetCollectionList$qqrpx19Classes@TCollection, @Snlconsolehelp@initialization$qqrv, @Snlconsolehelp@Finalization$qqrv, @Snlconsolehelp@TCommandLineParametersHelpWindow@$bcdtr$qqrv, @Snlconsolehelp@TCommandLineParametersHelpWindow@$bcctr$qqrv, @Snlconsolehelp@TCommandLineParameters@Add$qqrv, @Snlconsolehelp@TCLPGroup@SetNecessity$qqrx32Snlconsolehelp@TGroupNecessities, @Snlconsolehelp@TCLPGroup@SetDescription$qqrx17System@WideString, @Snlconsolehelp@TCLPGroup@SetGroupName$qqrx17System@WideString, @Snlconsolehelp@TCLPGroup@AddParameter$qqr17System@WideStringt1, @Snlconsolehelp@CommandLineParameters$qqrv, @Snlconsole@initialization$qqrv, @Snlconsole@Finalization$qqrv, @Snlpeversions@initialization$qqrv, @Snlpeversions@Finalization$qqrv, @Snlpeversions@GetAppVersion$qqrx17System@WideString, @Snlpeversions@GetVersionCustomBuild$qqrx17System@WideString, @Snlpeversions@GetVersionDescription$qqrx17System@WideStringr17System@WideString, @Snlpeversions@GetVersionRes$qqrx17System@WideStringxuipx19Classes@TStringList, @Snlpeversions@GetVersionResCount$qqrx17System@WideString, @Snldebug@initialization$qqrv, @Snldebug@Finalization$qqrv, @Snldebug@TDebugLogger@$bcdtr$qqrv, @Snldebug@TDebugLogger@LogWarning$qqr20System@UnicodeString, @Snldebug@TDebugLogger@LogMessage$qqr17System@WideString26Snldebugconsts@TDebugLevel, @Snldebug@TDebugLogger@LogLeaveProcess$qqr20System@UnicodeString, @Snldebug@TDebugLogger@LogLeaveMethod$qqr20System@UnicodeStringpx14System@TVarRecxi26Snldebugconsts@TDebugLevel, @Snldebug@TDebugLogger@LogLeaveMethod$qqr20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@TDebugLogger@LogLeaveMethod$qqrp14System@TObject20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@TDebugLogger@LogError$qqr20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@TDebugLogger@LogEnterProcess$qqr20System@UnicodeString, @Snldebug@TDebugLogger@LogEnterMethod$qqr20System@UnicodeStringpx14System@TVarRecxi26Snldebugconsts@TDebugLevel, @Snldebug@TDebugLogger@LogEnterMethod$qqrp14System@TObject20System@UnicodeStringpx14System@TVarRecxi26Snldebugconsts@TDebugLevel, @Snldebug@TDebugLogger@$bcctr$qqrv, @Snldebug@DebugLogVarStringList$qqr20System@UnicodeStringp16Classes@TStrings26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogVarString$qqr20System@UnicodeString17System@WideString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogVarString$qqr20System@UnicodeString27System@%AnsiStringT$us$i0$%26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogVarCardinal$qqr20System@UnicodeStringui26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogError$qqrui20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogError$qqr20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogException$qqrp18Sysutils@Exception20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogMessage$qqr17System@WideString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogMessage$qqr27System@%AnsiStringT$us$i0$%26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogLeaveThread$qqr20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogEnterThread$qqr20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogLeaveUnitFinalization$qqr20System@UnicodeString, @Snldebug@DebugLogEnterUnitFinalization$qqr20System@UnicodeString, @Snldebug@DebugLogLeaveUnitInitialization$qqr20System@UnicodeString, @Snldebug@DebugLogEnterUnitInitialization$qqr20System@UnicodeString, @Snldebug@DebugLogLeaveProcess$qqr20System@UnicodeString, @Snldebug@DebugLogEnterProcess$qqr20System@UnicodeString, @Snldebug@DebugLogLeaveMethod$qqr20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogLeaveMethod$qqrp14System@TObject20System@UnicodeStringpx14System@TVarRecxi26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogLeaveMethod$qqrp14System@TObject20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogEnterMethod$qqrp14System@TObject20System@UnicodeStringpx14System@TVarRecxi26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogEnterMethod$qqr20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogEnterMethod$qqrp14System@TObject20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogger, @Snlregistry@initialization$qqrv, @Snlregistry@Finalization$qqrv, @Snlregistry@TMyRegistry@GetValueNames$qqrp16Classes@TStrings, @Snlregistry@TMyRegistry@WriteMultiString$qqrx17System@WideStringt1, @Snlregistry@TMyRegistry@ValueExists$qqrx17System@WideString, @Snlregistry@TMyRegistry@ReadString$qqrx17System@WideString, @Snlregistry@TMyRegistry@ReadMultiString$qqrx17System@WideString, @Snlregistry@TMyRegistry@ReadCardinal$qqrx17System@WideString, @Snlregistry@TMyRegistry@GetDataType$qqrx17System@WideString, @Snlregistry@TMyRegistry@$bctr$qqrv, @Snlregistry@TMyRegistry@, @Snlregfiles@initialization$qqrv, @Snlregfiles@Finalization$qqrv, @Snlregcache@initialization$qqrv, @Snlregcache@Finalization$qqrv, @Snlsecurity@initialization$qqrv, @Snlsecurity@Finalization$qqrv, @Snlsecurity@pkLookupAccountName$qqrx17System@WideStringt1, @Snlsecurity@pkConvertSidToStringSid$qqrpv, @Snlsecurity@SecurityDescriptorAccountSIDToStringNoMachine$qqr17System@WideStringt1, @Snlregtools@initialization$qqrv, @Snlregtools@Finalization$qqrv, @Snlregtools@pkRegKeyExists$qqrxp6HKEY__x17System@WideStringxo, @Snlregtools@pkRegKeyExists$qqrxp6HKEY__x27System@%AnsiStringT$us$i0$%xo, @Snlregtools@pkRegReadKeyNames$qqrp6HKEY__27System@%AnsiStringT$us$i0$%p16Classes@TStringsxo, @Snlregtools@pkRegWriteSingleDateTime$qqrp6HKEY__27System@%AnsiStringT$us$i0$%t216System@TDateTime, @Snlregtools@pkRegWriteSingleBoolean$qqrp6HKEY__27System@%AnsiStringT$us$i0$%t2o, @Snlregtools@pkRegWriteSingleCardinal$qqrp6HKEY__27System@%AnsiStringT$us$i0$%t2uixuc, @Snlregtools@pkRegWriteSingleInteger$qqrp6HKEY__27System@%AnsiStringT$us$i0$%t2ixuc, @Snlregtools@pkRegReadSingleWideString$qqrp6HKEY__27System@%AnsiStringT$us$i0$%17System@WideStringr17System@WideStringxuc, @Snlregtools@pkRegReadSingleString$qqrp6HKEY__27System@%AnsiStringT$us$i0$%t2r27System@%AnsiStringT$us$i0$%xuc, @Snlregtools@pkRegWriteMultiString$qqrp6HKEY__27System@%AnsiStringT$us$i0$%t2p16Classes@TStrings, @Snlregtools@pkRegWriteSingleString$qqrp6HKEY__27System@%AnsiStringT$us$i0$%t2t2xuc, @Snlthreads@initialization$qqrv, @Snlthreads@Finalization$qqrv, @Snlthreads@TDLLThread@$bdtr$qqrv, @Snlthreads@TDLLThread@$bctr$qqro, @$xp$21Snlthreads@TDLLThread, @Snlthreads@TDLLThread@, @Snlhashesbase@GetRawByteFileStreamPartHash$qqrx20System@UnicodeStringujujp17System@TMetaClassr31System@%AnsiStringT$us$i65535$%rui, @Snlhashesbase@GetRawByteFileStreamHash$qqrx20System@UnicodeStringp17System@TMetaClassr31System@%AnsiStringT$us$i65535$%rui, @Snlhashesdec@THashAlgorithmDECSHA1@, @Snlhashesdec@THashAlgorithmDECMD5@, @Snlalgoahocorasick@initialization$qqrv, @Snlalgoahocorasick@Finalization$qqrv, @Snlalgoahocorasick@TAhoCorasickReplacer@Replace$qqrx27System@%AnsiStringT$us$i0$%, @Snlalgoahocorasick@TAhoCorasick@$bctr$qqrv, @Snlalgoahocorasick@TAhoCorasick@BuildTree$qqro, @Snlalgoahocorasick@TAhoCorasickReplacer@, @Snlalgostringcompare@initialization$qqrv, @Snlalgostringcompare@Finalization$qqrv, @Snlalgostringcompare@TRegExpResults@$bcdtr$qqrv, @Snlalgostringcompare@TRegExpResults@$bcctr$qqrv, @Snlalgostringcompare@AhoCorasickStringReplaceA$qqrx27System@%AnsiStringT$us$i0$%p33Jclansistrings@TJclAnsiStringList49System@%Set$t21Sysutils@Sysutils__85$iuc$0$iuc$1%o, @Snlalgostringcompare@RegExpCompareString$qqrx17System@WideStringt1xo, @Snlalgostringcompare@pkCompareIDString$qqrx17System@WideStringt1o34Snlalgostringcompare@TCompareStyle, @Snlalgomd5@initialization$qqrv, @Snlalgomd5@Finalization$qqrv, @Snlalgomd5@MD5String$qqr27System@%AnsiStringT$us$i0$%, @Snlalgomd5@MD5Print$qqrpxuc, @Snlfileslistbasic@initialization$qqrv, @Snlfileslistbasic@Finalization$qqrv, @Snlfileslistbasic@FindFileList$qqrx17System@WideStringp16Classes@TStringsxoxoxoxo, @Snlfileslistbasic@FindFileList$qqrx17System@WideStringp16Classes@TStringsxoxo, @Snlfileslistbasic@ListFiles$qqrx17System@WideStringp16Classes@TStringsxoxoxoxoxo, @Snlwindowspe@RunningWinPE$qqrv, @Snlmemusagewatch@initialization$qqrv, @Snlmemusagewatch@Finalization$qqrv, @Snlmemusagewatch@RegisterMemUsageWatch$qqr20System@UnicodeStringt1t1pqqrruit1$v, @Snldiskmbr@initialization$qqrv, @Snldiskmbr@Finalization$qqrv, @Snlpesimple@initialization$qqrv, @Snlpesimple@Finalization$qqrv, @Snlpedisasm86@initialization$qqrv, @Snlpedisasm86@Finalization$qqrv, @Snlhasheswincrypt@initialization$qqrv, @Snlhasheswincrypt@Finalization$qqrv, @Snldiskdirect@TMasterBootRecords@Refresh$qqro, @Snldiskdirect@TMasterBootRecords@FindMBRByDriveIndex$qqri, @Snldiskdirect@TMasterBootRecords@$bcdtr$qqrv, @Snldiskdirect@TMasterBootRecords@$bcctr$qqrv, @Snldiskdirect@MasterBootRecords, @Snlstrings@SplitURI$qqrx27System@%AnsiStringT$us$i0$%r27System@%AnsiStringT$us$i0$%p16Classes@TStrings, @Gnugettext@initialization$qqrv, @Gnugettext@Finalization$qqrv, @Snlnumbers@HexToLongWord$qqr17System@WideString, @Snlnumbers@HexToLongWord$qqr27System@%AnsiStringT$us$i0$%, @Snlnumbers@WordToHexA$qqrxus, @Snlnumbers@LongWordToHex$qqrxui, @Snlnumbers@StringToBinarySeparatorA$qqrx27System@%AnsiStringT$us$i0$%xco, @Snlnumbers@StringToBinarySeparator$qqrx27System@%AnsiStringT$us$i0$%xb, @Snlstrings@StringSeemsValidString$qqrx27System@%AnsiStringT$us$i0$%, @Snlstrings@TryPossibleUnicodeStringToAnsiStringSimple$qqr27System@%AnsiStringT$us$i0$%, @Snlwindows@MyWindowsIsVistaOrLater$qqrv, @Snlwindows@DynGetProcessAffinityMask$qqsuiruit2, @Snlwinapint@pkIsWow64Process$qqrv, @Snllocalizer@FormatLocalDateTime$qqrx20System@UnicodeString16System@TDateTime, @Snldate@EightLetterDateToDateTime$qqr20System@UnicodeString, @Snldate@ConvertARJTimeToDateTime$qqrui, @Snlstreams@TMyFileStreamHelper@ReadWideStringWordLen$qqrv, @Snldebug@TDebugLogger@LogEnterMethod$qqr20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@TDebugLogger@LogEnterMethod$qqrp14System@TObject20System@UnicodeString26Snldebugconsts@TDebugLevel, @Snldebug@DebugLogger$qqrv, @Snlregistry@TMyRegistry@WriteCardinal$qqrx17System@WideStringui, @Snlalgoahocorasick@TAhoCorasickMultiReplacer@Replace$qqrx27System@%AnsiStringT$us$i0$%, @Snlalgoahocorasick@TAhoCorasickMultiReplacer@$bctr$qqrv, @Snlalgoahocorasick@TAhoCorasickMultiReplacer@, @Snlalgostringcompare@AhoCorasickStringReplaceA$qqrx27System@%AnsiStringT$us$i0$%p30Jclansistrings@TJclAnsiStrings49System@%Set$t21Sysutils@Sysutils__85$iuc$0$iuc$1%t2o, @Snlalgostringcompare@SubStringCompareString$qqrx27System@%AnsiStringT$us$i0$%t1xo, @Snlalgostringcompare@GetCompareIDStyle$qqrr27System@%AnsiStringT$us$i0$%r34Snlalgostringcompare@TCompareStyle34Snlalgostringcompare@TCompareStyle, @Snlalgostringcompare@pkCompareString$qqrx27System@%AnsiStringT$us$i0$%t134Snlalgostringcompare@TCompareStyleo, @Snlalgomd5@MD5PrintA$qqrpxuc, @Snlalgomd5@MD5File$qqrx17System@WideStringxui, @Snlwinapitrust@initialization$qqrv, @Snlwinapitrust@Finalization$qqrv, @Snlwinapitrust@TWinTrustChecker@Init$qqrv, @Snlwinapitrust@TWinTrustChecker@$bdtr$qqrv, @Snlwinapitrust@TWinTrustChecker@$bctr$qqrv, @Snlwinapitrust@TWinTrustChecker@CheckFileTrust$qqrx17System@WideString, @Snlwinapitrust@CheckFileTrust$qqrx20System@UnicodeString, @$xp$31Snlwinapitrust@TWinTrustChecker, @Snlwinapitrust@TWinTrustChecker@, @Snlwinvista@initialization$qqrv, @Snlwinvista@Finalization$qqrv
snlfileformats150.bpl
@Snlffeventlogwindows@AddEventSource$qqrx20System@UnicodeStringt1t1xuixui, @Snlffeventlogwindows@EventLogMessage$qqrxuixuipcp20System@UnicodeStringxi, @Snlffeventlogwindows@SystemErrorMessage$qqrxi, @Snlffbase@TCustomFileFormat@LoadFromFile$qqr17System@WideStringo, @Snlffbase@TCustomFileFormat@$bctr$qqrv, @$xp$27Snlffbase@TCustomFileFormat, @Snlffbase@TCustomFileFormat@, @Snlffinisimple@THashCryptedZipIniFile@$bctr$qqrx17System@WideStringx27System@%AnsiStringT$us$i0$%, @Snlffinisimple@THashCryptedZipIniFile@, @Snlfflogfile@initialization$qqrv, @Snlfflogfile@Finalization$qqrv, @Snlfflogfile@TApplicationLogFile@$bcdtr$qqrv, @Snlfflogfile@TApplicationLogFile@$bcctr$qqrv, @Snlffbase@TCustomFileFormat@SaveToStream$qqrp15Classes@TStream, @Snlffbase@TCustomFileFormat@SaveToFile$qqr17System@WideString, @Snlffbase@TCustomFileFormat@GetValid$qqrv, @Snlffbase@TCustomFileFormat@Clear$qqrv, @Snlffidentifier@initialization$qqrv, @Snlffidentifier@Finalization$qqrv, @$xp$33Snlffidentifier@TFileIdentifyType, @Snlffinisimple@THashCryptedZipIniFile@$bctr$qqrx17System@WideStringx27System@%AnsiStringT$us$i0$%p18Sysutils@TEncoding
snlthirdparty150.bpl
@Gnugettext@initialization$qqrv, @Gnugettext@Finalization$qqrv, @Regexpr@initialization$qqrv, @Regexpr@Finalization$qqrv, @Regexpr@TRegExpr@Exec$qqrx17System@WideString, @Regexpr@TRegExpr@SetModifier$qqrio, @Regexpr@TRegExpr@GetMatch$qqri, @Regexpr@TRegExpr@SetExpression$qqrx17System@WideString, @Regexpr@TRegExpr@$bctr$qqrv, @Regexpr@TRegExpr@
sqlite3.dll
sqlite3_create_collation, sqlite3_bind_parameter_index, sqlite3_bind_null, sqlite3_bind_int64, sqlite3_bind_int, sqlite3_bind_double, sqlite3_bind_text, sqlite3_bind_blob, sqlite3_backup_finish, sqlite3_backup_step, sqlite3_backup_init, sqlite3_reset, sqlite3_finalize, sqlite3_column_int64, sqlite3_column_type, sqlite3_column_text16, sqlite3_column_text, sqlite3_column_double, sqlite3_column_bytes, sqlite3_column_blob, sqlite3_step, sqlite3_column_decltype, sqlite3_column_name16, sqlite3_column_count, sqlite3_prepare16_v2, sqlite3_prepare16, sqlite3_total_changes, sqlite3_changes, sqlite3_busy_timeout, sqlite3_last_insert_rowid, sqlite3_free, sqlite3_errcode, sqlite3_errmsg, sqlite3_libversion, sqlite3_close, sqlite3_open16
user32.dll
WaitForInputIdle, TranslateMessage, SystemParametersInfoW, ShowWindow, ShowOwnedPopups, SetWindowPos, SetWindowPlacement, SetWindowLongW, SetPropA, SetParent, SetForegroundWindow, SetClassLongW, SendMessageTimeoutA, SendMessageTimeoutW, SendMessageCallbackA, SendMessageA, SendMessageW, RemovePropA, PostThreadMessageA, PostThreadMessageW, PostMessageA, PostMessageW, OffsetRect, MsgWaitForMultipleObjects, MessageBoxW, IsZoomed, IsWindowVisible, IsWindowUnicode, IsWindowEnabled, IsWindow, IsIconic, GetWindowThreadProcessId, GetWindowRect, GetWindowPlacement, GetWindowLongW, GetTopWindow, GetSystemMetrics, GetPropA, GetParent, GetWindow, GetMessageW, GetMenu, GetForegroundWindow, GetClientRect, GetClassNameA, GetClassLongW, FindWindowExA, FindWindowExW, FindWindowW, EnumWindows, EnumThreadWindows, EnableWindow, DispatchMessageW, DestroyWindow, DestroyIcon, ChildWindowFromPointEx, AttachThreadInput, AdjustWindowRectEx
vcl150.bpl
@Graphics@initialization$qqrv, @Graphics@Finalization$qqrv, @Actnlist@initialization$qqrv, @Actnlist@Finalization$qqrv, @Controls@initialization$qqrv, @Controls@Finalization$qqrv, @Themes@initialization$qqrv, @Themes@Finalization$qqrv, @Menus@initialization$qqrv, @Menus@Finalization$qqrv, @Printers@initialization$qqrv, @Printers@Finalization$qqrv, @Graphutil@initialization$qqrv, @Graphutil@Finalization$qqrv, @Extctrls@initialization$qqrv, @Extctrls@Finalization$qqrv, @Extctrls@TTimer@SetEnabled$qqro, @$xp$15Extctrls@TTimer, @Extctrls@TTimer@, @Comctrls@initialization$qqrv, @Comctrls@Finalization$qqrv, @Comctrls@TListItem@GetIndex$qqrv, @Comctrls@TListItem@SetCaption$qqrx20System@UnicodeString, @$xp$18Comctrls@TListItem, @Dialogs@initialization$qqrv, @Dialogs@Finalization$qqrv, @Dialogs@MessageDlg$qqrx20System@UnicodeString19Dialogs@TMsgDlgType47System@%Set$t18Dialogs@TMsgDlgBtn$iuc$0$iuc$11%i, @Clipbrd@initialization$qqrv, @Clipbrd@Finalization$qqrv, @Forms@initialization$qqrv, @Forms@Finalization$qqrv, @Svcmgr@initialization$qqrv, @Svcmgr@Finalization$qqrv, @Svcmgr@TServiceApplication@Installing$qqrv, @Svcmgr@TService@DoCustomControl$qqrui, @Svcmgr@TService@DoShutdown$qqrv, @Svcmgr@TService@DoInterrogate$qqrv, @Svcmgr@TService@DoContinue$qqrv, @Svcmgr@TService@DoPause$qqrv, @Svcmgr@TService@DoStop$qqrv, @Svcmgr@TService@DoStart$qqrv, @Svcmgr@TService@Controller$qqrui, @Svcmgr@TService@GetTerminated$qqrv, @Svcmgr@TService@GetDisplayName$qqrv, @Svcmgr@TService@$bdtr$qqrv, @Svcmgr@TService@$bctr$qqrp18Classes@TComponenti, @Svcmgr@TServiceThread@ProcessRequests$qqro, @Svcmgr@Application, @$xp$15Svcmgr@TService, @Svcmgr@TService@, @$xp$25Svcmgr@TServiceController, @Comctrls@TListColumns@Add$qqrv, @Comctrls@TListColumns@GetItem$qqri, @Comctrls@TListColumn@SetMaxWidth$qqri, @Comctrls@TListColumn@SetAlignment$qqr18Classes@TAlignment, @Comctrls@TListColumn@SetWidth$qqri, @Comctrls@TListColumn@SetCaption$qqrx20System@UnicodeString, @$xp$18Comctrls@TListView, @Oleserver@initialization$qqrv, @Oleserver@Finalization$qqrv, @Axctrls@initialization$qqrv, @Axctrls@Finalization$qqrv, @Olectrls@initialization$qqrv, @Olectrls@Finalization$qqrv
version.dll
VerQueryValueW, GetFileVersionInfoSizeW, GetFileVersionInfoW, VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
wininet.dll
UnlockUrlCacheEntryFileW, FindNextUrlCacheEntryW, FindFirstUrlCacheEntryW, FindCloseUrlCache, DeleteUrlCacheEntryW, HttpQueryInfoA, HttpSendRequestA, HttpOpenRequestA, InternetReadFile, InternetConnectA, InternetCloseHandle, InternetOpenA
ws2_32.dll
WSACleanup, WSAStartup
wtsapi32.dll
WTSQueryUserToken

SDFSSvc.exe

Spybot - Search & Destroy by Safer Networking Ltd. (Signed)

Remove SDFSSvc.exe
Version:   2.3.39.217
MD5:   11d94599270aa1603f75cb5acbbd266f
SHA1:   f94404cfe64edf5a162818cba32a4fc8330a804e

What is SDFSSvc.exe?

Spybot-S&D 2 Scanner Service for Spybot Search & Destroy (S&D) is a spyware and adware removal computer program that scans the computer hard disk and/or RAM for malicious software. In addition to spyware and adware detection and disinfection, Spybot-S&D can repair the registry, winsock LSPs, ActiveX objects, browser hijackers and BHOs, PUPS, computer cookies, trackerware, heavy duty, homepage hijackers, keyloggers, LSP, tracks, trojans, spybots, revision, and other kinds of malware.

About SDFSSvc.exe (from Safer Networking Ltd.)

Spybot-S&D is free for private use. Even if you don’t see the symptoms, your computer may be infected. The creators of spyware are constantly developing new ways of invading your privacy. Team Spybot

DetailsDetails

File name:sdfssvc.exe
Publisher:Safer-Networking Ltd.
Product name:Spybot - Search & Destroy
Description:Spybot-S&D 2 Scanner Service
Typical file path:C:\Program Files\spybot - search & destroy 2\sdfssvc.exe
File version:2.3.39.217
Product version:2.3.39.0
Size:1.66 MB (1,738,200 bytes)
Build date:4/25/2014 7:12 AM
Certificate
Issued to:Safer Networking Ltd.
Authority (CA):VeriSign
Effective date:Tuesday, March 20, 2012
Expiration date:Tuesday, April 7, 2015
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Safer-Networking Ltd.
8% remove
Spybot Search & Destroy (S&D) is a spyware and adware removal computer program compatible with Microsoft Windows. It scans the computer hard disk and/or RAM for malicious software. In addition to spyware and adware detection and disinfection, Spybot-S&D can repair the registry, winsock LSPs, ActiveX objects, browser hijackers and BHOs, PUPS, computer cookies, trackerware, heavy duty, homepage hijackers, keyloggers, LSP, tracks, trojans,...

BehaviorsBehaviors

Services
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • SDScannerService
  • 'SDScannerService' (Spybot-S&D 2 Scanner Service)
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
  • Firewall exception for 'C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe'
  • Firewall exception for 'C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe'
Network connections
Access through an approved Windows firewall exception
  • [UDP] listens on port 49152
  • [UDP] listens on port 61220
  • [UDP] listens on port 50941

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.00033911%
    0.028634%
    Kernel CPU:0.00020860%
    0.013761%
    User CPU:0.00013051%
    0.014873%
    Kernel CPU time:3,303 ms/min
    100,923,805ms/min
    CPU cycles:8,810,288/sec
    17,470,203/sec
    Memory
    Private memory:32.51 MB
    21.59 MB
    Private (maximum):38.77 MB
    Private (minimum):29.48 MB
    Non-paged memory:32.51 MB
    21.59 MB
    Virtual memory:159.85 MB
    140.96 MB
    Virtual memory (peak):167.22 MB
    169.69 MB
    Working set:29.81 MB
    18.61 MB
    Working set (peak):38.86 MB
    37.95 MB
    Page faults:1,522,400/min
    2,039/min
    I/O
    I/O read transfer:21.94 KB/sec
    1.02 MB/min
    I/O read operations:1/sec
    343/min
    I/O write transfer:74.1 KB/sec
    274.99 KB/min
    I/O write operations:1/sec
    227/min
    I/O other transfer:80.53 KB/sec
    448.09 KB/min
    I/O other operations:3,002/sec
    1,671/min
    Resource allocations
    Threads:19
    12
    Handles:650
    600

    BehaviorsProcess properties

    Integrety level:System
    Platform:64-bit
    Command line:"C:\Program Files\spybot - search & destroy 2\sdfssvc.exe"
    Owner:SYSTEM
    Windows Service
    Service name:SDScannerService
    Display name:SDScannerService
    Description:“Offers malware scanning services to Spybot-S&D modules.”
    Type:Win32OwnProcess
    Parent process:services.exe (Services and Controller app by Microsoft)

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 48.12%
    Microsoft Windows XP 11.28%
    Windows 7 Professional 9.77%
    Windows 7 Ultimate 7.52%
    Windows 8 5.26%
    Windows 8.1 Pro 4.51%
    Windows 8 Pro with Media Center 3.01%
    Windows 8 Single Language 2.26%
    Windows Vista Home Basic 2.26%
    Windows Vista Home Premium 2.26%
    Windows 7 Home Basic 2.26%
    Windows Vista Business 1.50%

    Distribution by countryDistribution by country

    United States installs about 62.41% of Spybot - Search & Destroy.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 25.95%
    Sony 19.85%
    Hewlett-Packard 12.98%
    ASUS 10.69%
    Acer 9.16%
    Toshiba 4.58%
    Intel 4.58%
    American Megatrends 3.82%
    Lenovo 3.05%
    Alienware 2.29%
    Samsung 2.29%
    GIGABYTE 0.76%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE